Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa
File:                     3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa (raw, json)
Hash identifier:          b3du5SkGrit+NpSd21sUl+osf6ePmLbD1q8TLf83bBw=
Subject key identifier:   D1:F4:AD:78:3C:9A:C8:9B:3B:A5:E9:3E:AE:28:BF:FA:D1:16:7D:7F
Certificate issuer:       /CN=24D5D46277BE98F80EC6AF901FD4322AA2FAB208
Certificate serial:       2CCDD0A83C0B06C5CA826B02CCFD2A44311FA855
Authority key identifier: 24:D5:D4:62:77:BE:98:F8:0E:C6:AF:90:1F:D4:32:2A:A2:FA:B2:08
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa
Signing time:             Tue 10 Feb 2026 04:26:29 +0000
ROA not before:           Tue 10 Feb 2026 04:21:29 +0000
ROA not after:            Tue 09 Feb 2027 04:26:29 +0000
asID:                     131454
IP address blocks:        151.158.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.crl
                          rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Feb 2026 05:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:cd:d0:a8:3c:0b:06:c5:ca:82:6b:02:cc:fd:2a:44:31:1f:a8:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D5D46277BE98F80EC6AF901FD4322AA2FAB208
        Validity
            Not Before: Feb 10 04:21:29 2026 GMT
            Not After : Feb  9 04:26:29 2027 GMT
        Subject: CN=D1F4AD783C9AC89B3BA5E93EAE28BFFAD1167D7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:19:89:d5:60:18:81:1f:c5:9f:97:b6:2a:16:
                    da:38:c5:1c:23:ce:47:db:17:31:b7:80:fa:10:c0:
                    a5:5c:7e:6f:cd:43:47:cb:d4:34:9c:ca:87:49:a3:
                    86:fc:0f:c1:5e:1b:c1:fa:91:b0:de:81:3a:da:71:
                    84:1f:59:f0:78:49:d7:20:73:e2:21:f1:19:1b:eb:
                    16:ec:b0:da:d4:28:e5:01:b8:83:11:0f:88:a7:ee:
                    df:f5:e7:26:ad:d7:0b:e3:73:05:c0:b1:1e:bb:64:
                    d4:a7:0f:a6:70:00:e9:b4:dc:17:48:39:20:80:58:
                    74:c0:d9:84:b5:d0:f2:f4:ef:49:f5:82:ba:e5:aa:
                    fe:6c:8d:a5:c1:6c:fe:86:98:bf:be:01:b2:2e:48:
                    28:52:09:a9:9b:75:7c:77:e7:d2:90:72:45:cc:88:
                    e8:1f:4e:0b:14:02:1a:b9:d7:ca:6f:b2:61:06:e6:
                    fe:6d:2d:9d:0d:6a:71:2b:c7:c0:f2:0b:ad:be:70:
                    e5:03:fe:74:30:50:4e:97:4a:17:06:77:96:79:8b:
                    d4:99:c9:29:cc:42:b3:9f:1a:64:a9:9c:85:3f:f9:
                    57:ae:d6:d9:8b:fb:72:38:9e:c7:4d:3c:39:a8:5d:
                    f6:1c:a5:d4:ca:ed:3e:8f:32:8b:6b:ba:59:e0:88:
                    ca:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F4:AD:78:3C:9A:C8:9B:3B:A5:E9:3E:AE:28:BF:FA:D1:16:7D:7F
            X509v3 Authority Key Identifier:
                keyid:24:D5:D4:62:77:BE:98:F8:0E:C6:AF:90:1F:D4:32:2A:A2:FA:B2:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:6f:5e:2a:b3:c2:7c:be:a7:cd:e2:bf:46:d3:a8:e7:07:1f:
         ca:bb:f5:40:96:be:0d:86:19:b1:00:f0:ef:90:ce:ca:38:d3:
         5e:a5:1d:35:48:8c:9f:86:f0:40:ca:a9:d8:1e:96:52:d9:bc:
         59:41:c1:04:46:4d:32:de:f6:db:63:da:f0:cb:13:61:05:8d:
         c8:84:08:b7:15:58:77:e0:92:a9:5c:fe:0c:1d:42:03:46:82:
         ac:c2:1f:3e:d5:1e:bb:06:a0:b9:37:7d:b4:9a:ab:15:78:e9:
         7c:b6:02:ce:7f:bb:f3:ac:d2:23:99:22:f6:8c:e9:93:44:cf:
         39:7b:e8:52:6e:61:27:9d:00:76:cb:3e:a9:6e:23:8d:97:05:
         af:a6:b1:99:9f:58:a8:3f:3e:99:8f:af:db:e7:ba:4a:03:1d:
         f3:de:f6:0a:d2:9f:8c:aa:46:32:2c:8b:56:77:7d:14:fc:d0:
         f2:72:c5:a0:85:a5:f9:6a:d7:ea:83:ce:19:cb:a5:dc:9b:fe:
         69:e7:07:4f:b7:a6:f8:de:af:5f:55:49:05:e2:f4:4a:6e:12:
         4f:c6:1f:a4:0d:65:b9:46:3c:0a:06:1b:8d:47:0b:87:e5:3b:
         ef:c1:75:03:08:61:6e:23:c1:db:3d:b5:84:e2:7c:48:f7:4b:
         2d:26:9e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:37:55 2026 by rpki-client